burp.md

Burp

Tips

• Use Ctrl + space to send a request in the repeater, which is way faster than clicking send and clicking back in the same point which you are modifying

Extensions

• 403 bypasser
• Add Custom Header: Add or change headers automatically based on rules
• AuthMatrix
• Auto Repeater
• Autorize
• Broken link hijacking: test for broken link
• Burp Bounty, Scan Check Builder: extend active and passive scanners
• Burp Share Requests: create links to share requests
• Burp2Slack
• Bypass WAF
• Collaborator everywhere: injects collabotor link in headers and checks for pingbacks
• Content Type Converter: convert JSON to and from XML easily
• Distribute damage: distribute traffic across targets
• Flow: history of all requests from all tools
• Golden nuggets: Generates wordlists using domain traffic
• Hunt Scanner: extend builtin scanners
• Logger++: better logger of requests
• Param Miner
• PwnFox: highlight requests using colors from Firefox containers
• Reflected Parameters
• Reflector
• Tabotator: show collaborator in a tab
• Turbo Intruder
• Upload scanner
• Webtech: technology identification
• Wordlist Extractor